Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
File: DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft (raw, json)
Hash identifier: Cb5JYdnnuanCb6JJPSRiE+wKH5/qLnp9MTlypX1uQB8=
Subject key identifier: 9A:7F:9D:5F:DD:96:E3:A4:E8:69:87:08:E7:94:70:46:89:BA:5A:CF
Authority key identifier: 0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E
Certificate issuer: /CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
Certificate serial: 01A1987C5EBABCD9353D6369E717799C3354
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
Manifest number: 1AF8
Signing time: Sun 01 Nov 2026 19:00:49 +0000
Manifest this update: Sun 01 Nov 2026 19:00:49 +0000
Manifest next update: Mon 02 Nov 2026 19:00:49 +0000
Files and hashes: 1: 1Jxi3AriRg31UMXbMH3OPiY-5HA.roa (hash: 3Mxy5Zs+xxbHjoz6LYDQ1mtzuO64bgmhPoqFp9H+W6U=)
2: 1lCX43rfgrd3UwSra2DvMolB2ko.roa (hash: HlEmjVnlqK6TJjU1qHHjaKYAoLJQkw56SG1ALNLBa+I=)
3: 2PolrAOhRQsrhDYmFoZ8Hf2dqko.roa (hash: Xq71zocml0mTHu8vbp5x/HrEbiwcbUVeA+bdWsQ2Clc=)
4: DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl (hash: gK9TiUS/eBm7XLQyuwvJ1S0SIm8ZHRKSsa+YW3+kIr8=)
5: EOQ5V0kDXyQ1FQ6B9-AVHGPqlCs.roa (hash: yS629cFjQWViH4uxLDi0K/sJNglxdC9RFtjY2YesInI=)
6: Rew-UH93UALzUyPxo4xaqs1RMv0.roa (hash: otpEuqhi4Q6jIERTfwB4XyfDwmL1emaLm3YkERpgegQ=)
7: SSpWF7_mFd5aLq1v7cUlO_7MUeg.roa (hash: sS4G3ab1K8SPkh8ckCRuErQYvrEjmRohAAhZp3pf6ig=)
8: VIHswKloBTz_t9AoHJWNnNEBMUI.roa (hash: WAmtMAhBc13uGgrmDPdaVCQ0HLUvc9oHeQeyCGtDrss=)
9: mJmloBqH1ccv7pf7_dE3WxThQ58.roa (hash: L0vhterDlOQyvmoADd6+0joQnbdSLqt2I9Yyqwk+Dl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:98:7c:5e:ba:bc:d9:35:3d:63:69:e7:17:79:9c:33:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
Validity
Not Before: Nov 1 19:00:49 2026 GMT
Not After : Nov 2 19:00:49 2026 GMT
Subject: CN=9a7f9d5fdd96e3a4e8698708e794704689ba5acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9d:c8:f1:0c:10:93:e4:44:91:ff:ed:ac:36:
a7:55:67:fd:68:00:b9:a6:00:41:09:68:21:a4:48:
f3:66:20:94:b3:73:7f:b3:b4:6a:48:39:1b:de:04:
ff:02:26:05:13:51:68:43:15:2b:00:17:be:b4:0b:
a4:32:27:2e:a0:df:30:11:c2:25:c9:a2:38:4d:0b:
f7:0b:8f:2d:9b:b1:a6:8e:3b:68:2e:47:43:eb:53:
ae:a0:78:f1:dd:3e:96:51:01:7b:5e:21:55:46:0c:
12:ab:07:12:1e:37:f2:12:be:13:95:44:13:aa:3f:
40:84:d8:7a:5d:63:b7:b8:1b:ca:75:3e:0c:00:15:
c7:13:ac:d8:42:17:8e:8e:d4:58:a8:33:1b:24:b2:
77:f1:6d:dc:fb:9d:52:57:e2:1b:5d:f2:5b:70:ce:
37:87:45:08:95:8d:4b:a5:97:6a:08:6d:88:b6:67:
e1:5c:4b:59:0d:d0:15:c5:68:df:d1:43:73:12:da:
7f:95:21:56:eb:bb:4b:c8:b2:b6:a8:45:6d:43:0f:
15:b5:d0:b5:55:42:2e:9c:06:57:e8:20:c5:f1:45:
82:be:9c:c5:47:3c:8a:89:16:c4:90:20:19:32:2f:
99:15:d0:4a:cb:de:af:bc:99:67:32:f9:50:d2:6e:
11:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:7F:9D:5F:DD:96:E3:A4:E8:69:87:08:E7:94:70:46:89:BA:5A:CF
X509v3 Authority Key Identifier:
keyid:0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:a6:41:7c:7b:9f:c9:64:ad:7b:23:8d:d6:ce:38:c5:55:6d:
72:da:24:06:6f:8b:67:65:27:00:fc:f0:c6:77:2b:2f:5d:bf:
59:ca:27:65:bf:59:df:7c:46:0e:5f:e9:8b:53:a0:9c:6a:d9:
b7:d5:bf:07:2e:8e:61:e3:0d:94:4f:56:32:58:92:fc:31:a9:
48:d3:db:39:7d:2f:24:60:3e:8f:fe:d9:19:48:b8:6b:f7:4d:
48:1e:77:c8:9e:0d:39:34:49:f5:1f:d4:55:7e:cf:23:48:4b:
55:b4:25:98:38:e4:2f:50:fa:3f:18:54:3f:07:83:58:f9:3f:
cf:2e:79:9c:2c:95:4b:19:c7:0f:15:71:5b:b2:d6:f1:ba:01:
93:3b:0c:f6:dd:d0:fa:0d:c5:1e:e2:27:c3:ce:0e:d4:c1:1f:
1f:75:ed:97:0a:3f:52:34:9e:96:4e:25:93:0d:cf:da:a9:4d:
3d:72:af:f7:ad:a9:5f:73:30:73:06:50:10:af:42:16:25:50:
8f:7e:7d:7e:8f:ea:83:d1:ff:ea:63:a0:09:0c:f6:f1:0a:5d:
3b:a5:11:5f:c2:76:c0:c9:00:97:cd:24:e3:d0:1a:b9:f9:18:
c8:62:76:8a:bc:a7:3c:26:6c:71:43:42:ba:48:0f:ee:2c:ea:
84:9d:d7:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGYfF66vNk1PWNp5xd5nDNUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTEzMDhlYWQ2YWRiMWQwODVlN2U1OTEwYTBjYjJkZTU2
YWEzMmUwHhcNMjYxMTAxMTkwMDQ5WhcNMjYxMTAyMTkwMDQ5WjAzMTEwLwYDVQQD
Eyg5YTdmOWQ1ZmRkOTZlM2E0ZTg2OTg3MDhlNzk0NzA0Njg5YmE1YWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZ3I8QwQk+REkf/trDanVWf9aAC5
pgBBCWghpEjzZiCUs3N/s7RqSDkb3gT/AiYFE1FoQxUrABe+tAukMicuoN8wEcIl
yaI4TQv3C48tm7GmjjtoLkdD61OuoHjx3T6WUQF7XiFVRgwSqwcSHjfyEr4TlUQT
qj9AhNh6XWO3uBvKdT4MABXHE6zYQheOjtRYqDMbJLJ38W3c+51SV+IbXfJbcM43
h0UIlY1LpZdqCG2ItmfhXEtZDdAVxWjf0UNzEtp/lSFW67tLyLK2qEVtQw8VtdC1
VUIunAZX6CDF8UWCvpzFRzyKiRbEkCAZMi+ZFdBKy96vvJlnMvlQ0m4RgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJp/nV/dluOk6GmHCOeUcEaJulrPMB8GA1UdIwQY
MBaAFAzhMI6tatsdCF5+WRCgyy3laqMuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9Fd2pxMXEyeDBJWG41WkVLRExMZVZxb3k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84OTkzODAtYWQyNy00NGViLThjMmUt
YjBiYWQxOGYwMmQwLzEvRE9Fd2pxMXEyeDBJWG41WkVLRExMZVZxb3k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS84OTkzODAtYWQyNy00NGViLThjMmUtYjBiYWQxOGYwMmQw
LzEvRE9Fd2pxMXEyeDBJWG41WkVLRExMZVZxb3k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgqZBfHuf
yWSteyON1s44xVVtctokBm+LZ2UnAPzwxncrL12/WconZb9Z33xGDl/pi1OgnGrZ
t9W/By6OYeMNlE9WMliS/DGpSNPbOX0vJGA+j/7ZGUi4a/dNSB53yJ4NOTRJ9R/U
VX7PI0hLVbQlmDjkL1D6PxhUPweDWPk/zy55nCyVSxnHDxVxW7LW8boBkzsM9t3Q
+g3FHuInw84O1MEfH3Xtlwo/UjSelk4lkw3P2qlNPXKv962pX3MwcwZQEK9CFiVQ
j359fo/qg9H/6mOgCQz28QpdO6URX8J2wMkAl80k49AaufkYyGJ2irynPCZscUNC
ukgP7izqhJ3XUQ==
-----END CERTIFICATE-----
Generated at Sun Nov 1 22:34:19 2026 by rpki-client